CVE-2014-2276: Medium severity EMC Connectrix Manager vulnerability
The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
EMC Connectrix Manager Converged Network Edition (CMCNE) FileUploadController servletto a version that resolves this vulnerability.Fixed in 12.1.5
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2276?
CVE-2014-2276 has a medium severity rating due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2014-2276?
To fix CVE-2014-2276, upgrade EMC Connectrix Manager Converged Network Edition to version 12.1.5 or later.
What are the implications of CVE-2014-2276?
The implications of CVE-2014-2276 include the risk of remote attackers gaining access to sensitive data by exploiting the vulnerable file upload feature.
Who is affected by CVE-2014-2276?
Organizations using EMC Connectrix Manager Converged Network Edition versions prior to 12.1.5 are affected by CVE-2014-2276.
Is there a workaround for CVE-2014-2276?
There is no official workaround for CVE-2014-2276, so the best mitigation is to apply the patch or upgrade the affected software.